CVE-2009-1798
published 2009-12-28CVE-2009-1798: Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
1.99%
78.2th percentile
Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the login_username vector for Forms/login1 is already covered by CVE-2009-4406.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SPECIFIC_APPS Possible APC Network Management Card Cross Site Scripting Attempt
suricata·2010-07-30
CVE-2009-1798 ET WEB_SPECIFIC_APPS Possible APC Network Management Card Cross Site Scripting Attempt
ET WEB_SPECIFIC_APPS Possible APC Network Management Card Cross Site Scripting Attempt
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Possible APC Network Management Card Cross Site Scripting Attempt"; flow:established,to_server; http.uri; content:"/Forms/login"; nocase; content:"login_username="; nocase; pcre:"/(?:script|onmouse[a-z]+|onkey[a-z]+|onload|onunload|ondragdrop|onblur|onfocus|onclick|ondblclick|onsubmit|onreset|onselect|onchange)/i"; reference:cve,2009-1798; classtype:web-application-attack; sid:2010862; rev:7; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, cve CVE_2009_1798, deployment Datacenter, confidence Medium, signature_severity Major, tag XSS, tag Cross_Site_Scripting, updated_at
No writeups or analysis indexed.
http://holisticinfosec.org/content/view/111/45/http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887http://secunia.com/advisories/37744http://www.kb.cert.org/vuls/id/166739http://holisticinfosec.org/content/view/111/45/http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887http://secunia.com/advisories/37744http://www.kb.cert.org/vuls/id/166739
2009-12-28
Published